Microsoft’s monthly Patch Tuesday on October 14, 2025, will deliver the final free security update for Windows 10, version 22H2. After that date, the operating system that still runs on more than four out of ten Windows PCs worldwide will no longer receive routine patches for newly discovered vulnerabilities, the company confirmed in a Message Centre update. The cut-off ends a decade of freely distributed fixes for Windows 10, leaving millions of users to choose between paying for extended support, upgrading to Windows 11, or taking their chances with an unpatched system.

“On October 14, 2025, Windows 10, version 22H2 (Home, Pro, Enterprise, Education, and IoT Enterprise editions) will reach end of servicing,” Microsoft stated. “The October 2025 monthly security update will be the last update available for these versions. After this date, devices running these versions will no longer receive monthly security and preview updates containing protections from the latest security threats.”

A snapshot from StatCounter’s July 2025 data showed Windows 10 still commanding a 42.99 percent share of Windows desktops globally. That represents hundreds of millions of laptops and desktop PCs that will soon be cut off from the security updates that plug the underlying vulnerabilities in the operating system. While the machines will continue to boot and run, each month without a patch creates a larger attack surface that cybercriminals can exploit with no fix coming from Redmond.

What the End of Servicing Actually Means

The end of servicing does not brick your PC. Applications will launch, files will open, and the desktop will look exactly the same on October 15 as it did the day before. But the protective tissue that surrounds the operating system—kernel patches, component fixes, driver mitigations—will no longer be refreshed. Every zero-day vulnerability uncovered after that date becomes a permanent hole for those who stay behind.

Separate lifecycles for Microsoft 365 Apps and Edge soften the blow slightly. Microsoft has extended Office security updates on Windows 10 through October 10, 2028, and Edge and WebView2 servicing continue under their own support policies. A fully patched browser and office suite close some doorways, but OS-level exploits that bypass application boundaries remain a serious risk.

Microsoft’s Extended Security Updates (ESU)—A First for Consumers

For the first time, Microsoft is letting everyday PC owners buy time with an Extended Security Updates (ESU) subscription. Previously reserved for enterprises with volume licensing contracts, the consumer ESU offers one additional year of critical and important security patches, spanning October 15, 2025 through October 13, 2026.

Microsoft has built three enrollment routes for personal devices:

  • Free via Windows Backup and OneDrive – Enable Windows Backup to sync your settings and documents to OneDrive, and the ESU enrollment is thrown in at no cost. A Microsoft Account is mandatory; the entitlement ties to that account.
  • Free via Microsoft Rewards – Redeem 1,000 Microsoft Rewards points per device. Points accumulate through Bing searches, daily quizzes, and other Microsoft ecosystem activities.
  • Paid – $30 (one‑time) – A single purchase covers up to 10 devices linked to the same Microsoft Account. This flat consumer fee is a fraction of what enterprises pay.

The enrollment wizard began rolling out to Windows Insiders in July 2025 and was slated for general availability by mid‑August. However, the initial rollout hit a snag; Microsoft issued cumulative update KB5063709 in August 2025 to fix an enrollment bug and widen access. If you do not see the ESU option in Settings → Update & Security → Windows Update, installing the latest patches is the first troubleshooting step.

Important Caveats

ESU for consumers is strictly security‑only. It delivers monthly patches for critical and important vulnerabilities but excludes new features, design changes, non‑security fixes, or general technical support. The program is a bridge, not a long‑term destination.

The Microsoft Account requirement is a significant privacy shift. Users who deliberately set up their PCs with a local account—and there are many—must convert to an online identity to take advantage of the free or paid ESU. That may be a non‑starter for privacy‑conscious households or those without reliable internet.

Per‑device licensing nuances also matter. The $30 consumer plan allows up to 10 devices under one Microsoft Account, but each machine must still be enrolled individually. Households with a mix of local and cloud accounts will need to plan how devices are linked. Enterprise and education customers have separate volume‑licensing paths with a graduated pricing model: $61 per device for year one, $122 for year two, and $244 for year three.

Upgrading to Windows 11—The Long‑Term Path

If your hardware meets Windows 11’s requirements, the free upgrade remains the recommended route. The upgrade check is straightforward: a compatible 64‑bit CPU from Microsoft’s approved list, at least 4 GB of RAM, 64 GB of storage, UEFI firmware with Secure Boot capability, and TPM 2.0. The PC Health Check app or the Windows Update page will confirm eligibility.

The strict requirements have been a point of contention since Windows 11 launched in 2021. Many older PCs lack a TPM 2.0 module or a supported CPU, rendering them officially ineligible. Workarounds do exist—registry tweaks and tools like Rufus can bypass the checks—but Microsoft warns these unsupported installs may not receive future updates and could suffer from reliability issues. For most users, forcing an upgrade on incompatible hardware is a gamble not worth taking with a daily‑driver machine.

For those whose hardware clears the bar, the upgrade process is seamless. Back up your data first, then head to Settings → Update & Security → Windows Update and select the option to upgrade. The move to Windows 11 also unlocks modern security features like virtualization‑based security (VBS) and enhanced driver protections, which Microsoft says are only possible with the newer platform requirements.

Alternatives Beyond the Windows Ecosystem

When upgrading isn’t possible and paying for ESU feels like a stopgap, alternative operating systems become viable.

  • Switch to Linux – Distributions like Ubuntu, Linux Mint, or Zorin OS breathe new life into older hardware and receive years of security updates for free. The learning curve is gentler than it once was, but application compatibility must be verified beforehand.
  • Buy a new Windows 11 PC – The cleanest path. Trade‑in and recycling programs can offset costs, and every new machine sold today supports Windows 11 out of the box.
  • Cloud PCs and Windows 365 – For those who only need occasional Windows access, a cloud PC can shift the security burden to Microsoft’s data centers. Some Windows 365 licenses even include ESU entitlements at no extra charge.
  • Continue unprotected – Technically possible, but the risk compounds monthly. In a landscape where ransomware gangs weaponize patched vulnerabilities within days, an unpatched Windows 10 box becomes a liability the moment a new exploit appears.

The Real Cost of Staying Behind

Money is just one dimension. The consumer ESU at $30—or free with OneDrive or Rewards—is remarkably inexpensive for a year of OS security patches. The hidden costs are harder to quantify: lost productivity if a compatibility issue forces a last‑minute migration, management overhead for small businesses juggling multiple devices, and the potential for a breach that compromises banking details or customer data.

Enterprise pricing underscores the urgency to migrate quickly. At $61 per device for the first year, an organization with 500 machines faces a $30,500 bill just to stay safe for 12 months. Year two doubles that to $61,000, and year three doubles again to $122,000. For cash‑strapped IT departments, those numbers make a compelling case to accelerate Windows 11 rollouts now.

For households, the math is friendlier. A single $30 payment protects up to 10 devices—a household with three aging laptops spends just $30 total, not $30 each, as long as they share a Microsoft Account. The free OneDrive route can be even more economical, provided the 5 GB of free cloud storage is sufficient. Many users will, however, exceed that limit and end up subscribing to Microsoft 365 for additional OneDrive space, which adds an ongoing cost.

A Practical Migration Playbook

With fewer than five months until the deadline, the window for a smooth transition is closing. A phased plan reduces last‑minute panic.

Immediately (within one week)
- Inventory every Windows 10 device. Note the build number (must be 22H2), RAM, storage, and whether it uses a local or Microsoft Account.
- Back up all important files to an external drive and a cloud service. Verify the backups by retrieving a few sample files.
- Install all pending updates, especially KB5063709, to ensure the ESU enrollment wizard will appear when needed.

Short term (2–6 weeks)
- Run PC Health Check or WhyNotWin11 on each machine to determine Windows 11 eligibility.
- Plan upgrades for compatible devices first. Schedule the upgrades during downtime and warn users that some settings may change.
- For devices that will remain on Windows 10, decide which ESU path to take. If using the free OneDrive method, ensure users sign in with a Microsoft Account and enable Windows Backup.

Before October 14, 2025
- Complete in‑place Windows 11 upgrades for all eligible machines, or migrate data to newly purchased Windows 11 PCs.
- Enroll remaining Windows 10 devices in the ESU program. The enrollment wizard should be visible in Windows Update; if not, check for updates again.

After October 14, 2025
- Verify that enrolled devices show “Active” ESU status under Settings → Update & Security → Windows Update. Test that security updates continue to arrive in subsequent Patch Tuesdays.
- Devices not enrolled in ESU become high‑risk systems immediately. Prioritize migrating any such device that handles email, banking, or personal documents.
- Use the ESU window (through October 13, 2026) to finish the transition. That year is a buffer, not an excuse to delay further.

Security and Privacy Trade‑offs

Tying ESU enrollment to a Microsoft Account and OneDrive backup brings privacy into the discussion. The free route essentially requires syncing your Windows settings and potentially personal files to Microsoft’s cloud. For users who have long resisted cloud backups, this can feel like a forced hand. Microsoft’s bet is that the convenience and security benefits outweigh the discomfort, but the choice remains yours. At least the Rewards path offers a cloud‑free free alternative for those with enough points.

On a broader security note, layered defenses remain essential even after enrolling in ESU. Keep antivirus software up to date, consider enabling any hardware‑backed security features your machine supports (like Secure Boot if available), and be extra cautious with email attachments and downloads. ESU patches the OS; it does not make an aging machine bulletproof.

Strengths and Weaknesses of Microsoft’s Approach

Strengths:
- Pragmatic bridge. The consumer ESU and its multiple no‑cost entry points are a genuine surprise from a company that historically reserved extended support for deep‑pocketed enterprises.
- Crystal‑clear deadlines. October 14, 2025, for the last free update and October 13, 2026, for the ESU window give everyone a fixed timeline to work with.
- Decoupled app lifecycles. Office and Edge get their own extended support, reducing the pressure for some workflows.

Weaknesses:
- Microsoft Account mandate. It alienates local‑account purists and forces a cloud dependency that many will resent.
- Short consumer ESU window. One year flies by. Microsoft has not yet announced whether a year‑two consumer ESU will be offered, leaving users in uncertainty after 2026.
- Phased enrollment bugs. The August patch fix shows the complexity of rolling out a new licensing mechanism to hundreds of millions of PCs; some users will inevitably get stuck.
- Hardware‑enforced obsolescence. The strict Windows 11 requirements have drawn criticism from environmental groups and regulators who worry about e‑waste. Lawsuits and policy challenges are already in motion in some regions.

What’s Next

Microsoft will not budge on the Windows 10 deadline. The company’s focus is firmly on Windows 11 and its Copilot‑infused future. The real question is how quickly the massive Windows 10 installed base will move. StatCounter data from mid‑2025 already showed Windows 11 beginning to overtake Windows 10 in some monthly snapshots, but the migration will be lumpy and won’t finish by October.

For the millions still on Windows 10, the playbook is clear: back up, update, check eligibility, and choose a path. Whether that path is a free Windows 11 upgrade, a $30 ESU purchase, or a leap to Linux, the time to act is now. Delaying past the deadline only increases the odds of becoming a cautionary tale in the next wave of cyberattacks against unpatched systems.

Microsoft’s final Patch Tuesday for Windows 10 is not a suggestion; it is a hard stop for free security support. The tools to stay safe—ESU, free cloud‑tied enrollment, Windows 11—are already in your hands. The only missing piece is your plan.